$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json) Hash identifier: /i5uvk3E5OOyaDpQHWl9vitjHIv0NU5FKqvxSFebe6Q= Subject key identifier: 4E:82:13:68:5A:9A:9D:77:FF:E4:49:9F:BF:67:13:72:50:5C:89:78 Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft Manifest number: 0872 Signing time: Fri 18 Jul 2025 20:57:08 +0000 Manifest this update: Fri 18 Jul 2025 20:57:07 +0000 Manifest next update: Fri 25 Jul 2025 20:57:07 +0000 Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: jJ5v83EgOGu3W20PfSpPbqVcQresqjbXOyEiAulMIIY=) 2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: 7GUW7TYiJ43LqgVUnKqTpmI4a0Ih/VJ75WOYgV4BI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Jul 18 20:57:07 2025 GMT Not After : Jul 25 20:57:07 2025 GMT Subject: CN=687ab524-27f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:5c:9d:e6:3a:dd:ba:d2:7e:38:d5:ae:36: de:be:1b:fe:0b:bd:8b:26:56:5b:0d:4d:99:99:e0: e7:dd:aa:46:d8:da:93:6f:73:cd:04:c7:e8:e5:cd: ac:96:cc:ba:79:52:6b:6e:81:a7:01:d7:4f:73:11: 29:7d:da:3a:79:48:3b:1d:8e:ed:be:ea:d6:5e:97: e5:32:28:c9:40:88:fd:c4:8c:c6:93:1d:e1:5b:f2: 84:38:64:0e:bc:d8:d2:93:25:c4:d3:b6:85:f9:0e: 67:44:a1:8c:19:53:2f:00:96:98:b6:18:66:9a:68: 98:b0:6f:99:0f:fa:b7:01:83:35:ab:75:f7:e2:33: 4d:26:c9:d1:30:c0:d9:fe:77:11:6f:a9:40:a6:10: aa:55:06:6c:23:13:4f:9e:fc:ad:3e:d9:25:a4:3a: a4:46:7d:1e:90:c8:84:91:d7:fc:d5:e7:d1:39:dd: b5:d8:62:78:06:8f:a3:39:5b:6f:21:7e:44:78:db: 67:72:6c:5a:c4:94:dc:7c:18:0a:b5:4c:3a:87:28: 5c:c5:23:b6:fb:ed:60:0a:7f:84:63:0f:e9:6e:6a: c7:93:5b:ff:83:d3:7d:3d:5a:35:61:44:82:0c:4f: 85:67:4f:9b:e9:e1:e7:55:67:e6:f4:30:b3:9b:cd: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:82:13:68:5A:9A:9D:77:FF:E4:49:9F:BF:67:13:72:50:5C:89:78 X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:0e:7b:b9:8e:f8:44:11:41:1a:dd:2b:a3:5a:48:51:63:c1: 7a:55:52:08:8f:56:76:48:77:b0:db:9c:19:4e:c1:36:fe:f3: 52:94:2d:bd:29:74:22:e0:dc:0a:9f:de:d8:0a:b9:05:a7:e8: a0:6b:6c:8d:b1:ee:e1:26:ba:ca:d8:a8:b3:f4:9e:26:aa:09: 91:e8:ea:02:e3:41:25:d5:58:87:65:24:11:5d:9e:8d:f5:f9: 42:b6:c4:7a:1c:c9:2c:0c:ee:37:1e:15:3f:0b:b4:7f:f3:ba: 12:f9:d9:4f:a6:2c:78:88:9b:46:9a:8f:4a:99:25:78:9a:ed: c2:4b:73:14:91:20:a2:53:ee:2c:fb:a5:3e:d6:ef:21:47:30: 09:02:b5:38:c3:cc:65:ca:08:cd:69:ac:52:14:7e:62:16:d2: 14:51:55:fb:22:4f:1f:f3:3d:cc:b0:bc:ed:d3:dd:f2:aa:93: 66:34:b2:a6:69:7f:db:8b:6f:2e:56:d5:cb:8b:14:ad:52:30: e2:0f:d1:7b:d3:3c:a5:68:fb:11:6b:ea:0e:0b:ff:da:28:5c: 3e:6d:ed:24:e8:8b:ff:64:7b:51:f1:65:70:09:e2:83:d8:c1: c1:ce:f8:66:f6:4b:da:a1:f2:3b:40:f3:77:8f:3f:14:bc:5c: b9:b5:9d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUwNzE4MjA1NzA3WhcNMjUwNzI1MjA1NzA3WjAYMRYwFAYD VQQDEw02ODdhYjUyNC0yN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywNcneY63brSfjjVrjbevhv+C72LJlZbDU2ZmeDn3apG2NqTb3PNBMfo5c2s lsy6eVJrboGnAddPcxEpfdo6eUg7HY7tvurWXpflMijJQIj9xIzGkx3hW/KEOGQO vNjSkyXE07aF+Q5nRKGMGVMvAJaYthhmmmiYsG+ZD/q3AYM1q3X34jNNJsnRMMDZ /ncRb6lAphCqVQZsIxNPnvytPtklpDqkRn0ekMiEkdf81efROd212GJ4Bo+jOVtv IX5EeNtncmxaxJTcfBgKtUw6hyhcxSO2++1gCn+EYw/pbmrHk1v/g9N9PVo1YUSC DE+FZ0+b6eHnVWfm9DCzm80iKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6CE2ha mp13/+RJn79nE3JQXIl4MB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6 dW9VTE82SVVLV3Rsc2FMYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATDnu5jvhEEUEa3SujWkhRY8F6VVIIj1Z2SHew25wZTsE2/vNSlC29 KXQi4NwKn97YCrkFp+iga2yNse7hJrrK2Kiz9J4mqgmR6OoC40El1ViHZSQRXZ6N 9flCtsR6HMksDO43HhU/C7R/87oS+dlPpix4iJtGmo9KmSV4mu3CS3MUkSCiU+4s +6U+1u8hRzAJArU4w8xlygjNaaxSFH5iFtIUUVX7Ik8f8z3MsLzt093yqpNmNLKm aX/bi28uVtXLixStUjDiD9F70zylaPsRa+oOC//aKFw+be0k6Iv/ZHtR8WVwCeKD 2MHBzvhm9kvaofI7QPN3jz8UvFy5tZ2u -----END CERTIFICATE-----Generated at Sun Jul 20 19:06:04 2025 by rpki-client